Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/EBC6AE7073E311EE90F86178C4F9AE02.roa
File: EBC6AE7073E311EE90F86178C4F9AE02.roa (raw, json)
Hash identifier: Qx3m01fjAfnkUOm+KaLL+i70Pnx1GHLJGiTmFMaXfP0=
Subject key identifier: C0:F9:AB:6B:65:90:23:D2:ED:AF:55:E3:1A:6C:92:3F:47:B2:74:6D
Certificate issuer: /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial: 0858
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/EBC6AE7073E311EE90F86178C4F9AE02.roa
Signing time: Thu 26 Oct 2023 09:42:04 +0000
ROA not before: Thu 26 Oct 2023 09:42:04 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 132203
IP address blocks: 43.128.222.0/23 maxlen: 23
43.130.0.0/17 maxlen: 24
43.130.128.0/18 maxlen: 24
43.131.0.0/18 maxlen: 24
43.131.224.0/19 maxlen: 24
43.132.68.0/24 maxlen: 24
43.132.96.0/19 maxlen: 24
43.132.128.0/17 maxlen: 24
43.134.0.0/18 maxlen: 18
43.134.64.0/18 maxlen: 18
43.135.58.0/24 maxlen: 24
43.135.187.0/24 maxlen: 24
43.152.96.0/19 maxlen: 24
43.152.192.0/19 maxlen: 19
43.152.224.0/19 maxlen: 19
43.153.0.0/18 maxlen: 18
43.153.64.0/18 maxlen: 18
43.153.128.0/18 maxlen: 18
43.153.164.0/24 maxlen: 24
43.153.187.0/24 maxlen: 24
43.153.192.0/18 maxlen: 18
43.153.250.0/23 maxlen: 23
43.154.0.0/18 maxlen: 18
43.154.64.0/18 maxlen: 18
43.154.128.0/18 maxlen: 18
43.154.192.0/18 maxlen: 18
43.155.0.0/17 maxlen: 18
43.155.127.0/24 maxlen: 24
43.155.128.0/17 maxlen: 18
43.156.0.0/18 maxlen: 18
43.156.64.0/18 maxlen: 18
43.156.128.0/18 maxlen: 18
43.156.192.0/18 maxlen: 18
43.156.252.0/24 maxlen: 24
43.156.254.0/24 maxlen: 24
43.157.0.0/17 maxlen: 24
43.157.128.0/18 maxlen: 24
43.157.192.0/18 maxlen: 24
43.158.0.0/16 maxlen: 16
43.158.0.0/17 maxlen: 24
43.158.128.0/18 maxlen: 24
43.158.192.0/18 maxlen: 24
43.159.0.0/16 maxlen: 16
43.159.0.0/20 maxlen: 24
43.159.16.0/20 maxlen: 24
43.159.32.0/19 maxlen: 24
43.159.76.0/24 maxlen: 24
43.159.128.0/18 maxlen: 24
43.159.192.0/18 maxlen: 24
43.160.0.0/16 maxlen: 24
43.161.0.0/17 maxlen: 24
43.161.128.0/17 maxlen: 24
43.162.0.0/17 maxlen: 24
43.162.128.0/17 maxlen: 24
43.163.0.0/16 maxlen: 16
43.163.192.0/18 maxlen: 24
43.164.0.0/16 maxlen: 24
43.165.0.0/16 maxlen: 24
43.166.0.0/16 maxlen: 24
43.167.0.0/16 maxlen: 24
43.168.0.0/16 maxlen: 24
43.169.0.0/16 maxlen: 24
43.170.0.0/16 maxlen: 24
43.171.0.0/16 maxlen: 24
43.172.0.0/16 maxlen: 24
43.173.0.0/16 maxlen: 24
43.174.0.0/16 maxlen: 24
101.32.140.0/24 maxlen: 24
101.33.4.0/23 maxlen: 23
101.33.17.0/24 maxlen: 24
101.33.18.0/23 maxlen: 23
101.33.26.0/23 maxlen: 23
101.33.30.0/23 maxlen: 23
101.33.41.0/24 maxlen: 24
101.33.114.0/23 maxlen: 24
150.109.90.0/24 maxlen: 24
150.109.91.0/24 maxlen: 24
240d:c000::/24 maxlen: 32
240d:c000:1000::/36 maxlen: 36
240d:c000:2000::/36 maxlen: 36
240d:c000:3000::/36 maxlen: 36
240d:c000:6000::/36 maxlen: 36
240d:c000:6000::/44 maxlen: 48
240d:c010::/48 maxlen: 48
240d:c010::/56 maxlen: 56
240d:c010:0:100::/56 maxlen: 56
240d:c010:10::/48 maxlen: 48
240d:c010:11::/48 maxlen: 48
240d:c010:12::/48 maxlen: 48
240d:c010:14::/48 maxlen: 48
240d:c010:16::/48 maxlen: 48
240d:c010:17::/48 maxlen: 48
240d:c010:1d::/48 maxlen: 48
240d:c010:20::/44 maxlen: 44
240d:c010:20::/56 maxlen: 56
240d:c010:20:100::/56 maxlen: 56
240d:c010:20:200::/56 maxlen: 56
240d:c010:30::/48 maxlen: 48
240d:c010:30::/56 maxlen: 56
240d:c010:30:100::/56 maxlen: 56
240d:c010:31::/48 maxlen: 48
240d:c010:50::/48 maxlen: 48
240d:c010:57::/48 maxlen: 48
240d:c010:58::/47 maxlen: 48
240d:c010:5c::/46 maxlen: 48
240d:c010:60::/48 maxlen: 48
240d:c010:66::/47 maxlen: 48
240d:c010:68::/48 maxlen: 48
240d:c010:6c::/47 maxlen: 48
240d:c010:6e::/48 maxlen: 48
240d:c040::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 22 Nov 2023 03:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2136 (0x858)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Validity
Not Before: Oct 26 09:42:04 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=653a346c-721a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:f9:9d:b1:f3:7d:db:91:68:85:ae:fb:c9:
51:dd:54:75:bf:ac:f4:ee:aa:3e:a6:a0:0f:b4:28:
5b:57:6d:ea:51:27:43:d5:c3:52:f8:66:73:00:0a:
aa:92:3a:03:63:f9:7c:84:d3:bd:aa:2e:f7:15:f4:
7c:9b:12:d2:13:6f:ab:f0:70:eb:1c:9f:4b:16:d6:
f5:3f:af:b2:d9:65:e7:f4:72:5c:79:c9:60:bc:0f:
5a:bb:d3:e6:5d:35:7c:37:bd:44:cd:18:f8:2b:d0:
8c:38:8c:9b:83:f3:7c:c3:1a:d8:ea:32:38:86:bb:
bc:11:31:fe:5d:65:ed:92:3c:79:d3:16:c4:6b:dd:
b0:2b:c5:98:02:33:22:f8:d7:01:2a:90:42:6d:d2:
e7:10:08:c8:a6:60:40:ab:ab:1e:5b:c1:18:bf:96:
4a:8f:6f:14:51:de:7c:51:55:60:d1:81:47:45:1e:
e2:09:31:0f:f2:0c:85:e5:c1:27:e6:79:7e:e6:1f:
ad:d1:6c:09:43:ac:76:22:1b:0c:aa:cd:d1:a9:1d:
b7:3a:bd:30:6a:da:18:30:5f:4b:35:3d:54:3e:cd:
19:b1:88:dd:ad:82:68:bb:94:8d:eb:85:65:51:b6:
9a:f8:5b:c8:3e:5b:80:c0:ff:f4:73:af:00:cc:ec:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F9:AB:6B:65:90:23:D2:ED:AF:55:E3:1A:6C:92:3F:47:B2:74:6D
X509v3 Authority Key Identifier:
keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/EBC6AE7073E311EE90F86178C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.128.222.0/23
43.130.0.0-43.130.191.255
43.131.0.0/18
43.131.224.0/19
43.132.68.0/24
43.132.96.0-43.132.255.255
43.134.0.0/17
43.135.58.0/24
43.135.187.0/24
43.152.96.0/19
43.152.192.0-43.174.255.255
101.32.140.0/24
101.33.4.0/23
101.33.17.0-101.33.19.255
101.33.26.0/23
101.33.30.0/23
101.33.41.0/24
101.33.114.0/23
150.109.90.0/23
IPv6:
240d:c000::/24
Signature Algorithm: sha256WithRSAEncryption
17:d6:00:4d:ba:d8:0f:ce:62:ca:67:81:7f:41:da:3a:5c:8b:
26:23:13:6f:e7:93:11:24:c6:b8:88:67:be:57:25:ed:14:84:
38:9c:49:ae:e0:9a:f5:35:ff:2f:54:21:d6:b6:cc:d6:ed:f4:
e4:c4:79:e8:05:f1:ee:1d:b5:81:0a:88:50:3d:4c:3e:5d:35:
bf:d1:f5:cd:4d:b9:40:53:75:21:2f:ac:f6:db:e5:5e:a2:dc:
0f:30:73:7c:e0:d5:94:20:bc:1a:58:7c:d4:9b:00:17:3b:cf:
f8:05:14:56:29:5d:b4:33:d0:7d:34:42:0f:74:80:5d:60:94:
64:6b:13:f7:40:93:a0:65:fe:71:84:38:27:4c:57:0e:36:ff:
5b:e1:b0:a2:fe:a5:02:d2:d5:fb:22:7c:75:1f:3f:2e:49:e9:
1f:db:17:0f:70:7f:72:84:fd:0b:53:0c:19:70:d9:67:53:6f:
f6:9d:8b:af:05:34:04:4d:6a:97:fb:63:5c:f5:8c:85:75:34:
9a:91:5e:d2:41:57:c1:d9:e7:39:12:fe:38:4c:a9:9d:42:e8:
35:32:e2:0b:8f:7b:fc:a9:d1:35:54:d7:df:68:fd:56:af:d7:
73:f6:85:fd:3c:42:2b:6c:9f:ae:29:38:a4:32:80:a5:cc:40:
86:0d:af:53
-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgICCFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjMxMDI2MDk0MjA0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTNhMzQ2Yy03MjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzz/5nbHzfduRaIWu+8lR3VR1v6z07qo+pqAPtChbV23qUSdD1cNS+GZzAAqq
kjoDY/l8hNO9qi73FfR8mxLSE2+r8HDrHJ9LFtb1P6+y2WXn9HJceclgvA9au9Pm
XTV8N71EzRj4K9CMOIybg/N8wxrY6jI4hru8ETH+XWXtkjx50xbEa92wK8WYAjMi
+NcBKpBCbdLnEAjIpmBAq6seW8EYv5ZKj28UUd58UVVg0YFHRR7iCTEP8gyF5cEn
5nl+5h+t0WwJQ6x2IhsMqs3RqR23Or0watoYMF9LNT1UPs0ZsYjdrYJou5SN64Vl
Ubaa+FvIPluAwP/0c68AzOy6RQIDAQABo4IDMTCCAy0wHQYDVR0OBBYEFMD5q2tl
kCPS7a9V4xpskj9HsnRtMB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvRUJDNkFFNzA3
M0UzMTFFRTkwRjg2MTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgboGCCsGAQUFBwEHAQH/
BIGqMIGnMIGWBAIAATCBjwMEASuA3jALAwMBK4IDBAYrgoADBAYrgwADBAUrg+AD
BAArhEQwCwMEBSuEYAMDACuEAwQHK4YAAwQAK4c6AwQAK4e7AwQFK5hgMAsDBAYr
mMADAwArrgMEAGUgjAMEAWUhBDAMAwQAZSERAwQCZSEQAwQBZSEaAwQBZSEeAwQA
ZSEpAwQBZSFyAwQBlm1aMAwEAgACMAYDBAAkDcAwDQYJKoZIhvcNAQELBQADggEB
ABfWAE262A/OYspngX9B2jpciyYjE2/nkxEkxriIZ75XJe0UhDicSa7gmvU1/y9U
Ida2zNbt9OTEeegF8e4dtYEKiFA9TD5dNb/R9c1NuUBTdSEvrPbb5V6i3A8wc3zg
1ZQgvBpYfNSbABc7z/gFFFYpXbQz0H00Qg90gF1glGRrE/dAk6Bl/nGEOCdMVw42
/1vhsKL+pQLS1fsifHUfPy5J6R/bFw9wf3KE/QtTDBlw2WdTb/adi68FNARNapf7
Y1z1jIV1NJqRXtJBV8HZ5zkS/jhMqZ1C6DUy4guPe/yp0TVU199o/Vav13P2hf08
Qitsn64pOKQygKXMQIYNr1M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org